IoT manufacturers in every region have a host of data privacy standards and laws to comply with — and Europe is now adding one more. The Cyber Resilience Act, or CRA, has some aspects that are simply common sense and…
Tag: DZone Security Zone
BSidesAustin 2023: CyberSecurity In The Texas Tech Capital
Austin, Texas, is a city filled with music, vibrant nightlife, and some legendary BBQ. It is also one of the great tech hubs of the southern United States, home to a wide variety of tech innovators like Indeed, SolarWinds, and…
Nine Benefits of Offshore Software Development
In today’s highly competitive business landscape, staying ahead of the curve often means leveraging the expertise and resources available around the globe. Offshore software development has emerged as a strategic approach for companies looking to optimize their software development processes…
Information Security: AI Security Within the IoT Industry
As the digital age progresses, we find ourselves amidst numerous ways of transmitting and storing information. From the smart devices that indwell our homes to the advanced artificial intelligence systems powering industries, the intertwining of technology with our daily lives…
Top 7 Best Practices DevSecOps Team Must Implement in the CI/CD Process
Almost every organization has implemented CI/CD processes to accelerate software delivery. However, with this increased speed, a new security challenge has emerged. Deployment speed is one thing, but without proper software checks, developers may inadvertently introduce security vulnerabilities, leading to…
Rethinking Quality Assurance in the Age of Generative AI
Generative AI is enabling software developers to create more code much faster than before. For software quality test engineers entrusted with assuring that applications get released on time and without bugs, GenAI presents both a challenge and a solution for…
How To Secure Your CI/CD Pipelines With Honeytokens
In the realm of software development, Continuous Integration and Continuous Deployment (CI/CD) pipelines have become integral. They streamline the development process, automate repetitive tasks, and enable teams to release software quickly and reliably. But while CI/CD pipelines are a marvel…
Exploring the Evolution and Impact of Computer Networks
In today’s interconnected world, computer networks have become the backbone of modern communication and information exchange. They enable the seamless transmission of data, facilitate collaboration, and connect individuals and devices across the globe. This article delves into the evolution, components,…
Why Is SaaS Compliance Important?
In the dynamic landscape of the digital era, the significance of SaaS (Software as a Service) has escalated exponentially. As we venture into 2023, the emphasis on SaaS compliance has become a focal point for businesses globally. In this comprehensive…
How To Learn Secure Software Development Lifecycle (SDLC)
Secure software development is crucial to safeguarding sensitive data and protecting against cyber threats. Learning the ins and outs of the Secure Software Development Lifecycle (SDLC) is a fundamental step for anyone aspiring to become a proficient software developer. In…
The Promise and Peril of Generative AI for Cybersecurity
A recent panel discussion at Black Hat 2023, Generative AI: Security Friend or Foe?, provided insights into how generative AI models like ChatGPT could impact security teams. Kelly Jackson, Editor-in-Chief of Dark Reading, moderated the roundtable with cybersecurity leaders Josh…
Four Ways for Developers To Limit Liability as Software Liability Laws Seem Poised for Change
For many years, the idea of liability for defects in software code fell into a gray area. You can find debate about the topic going back and forth since at least the early 1990s. Throughout, software developers argued that they shouldn’t…
DevSecOps: Integrating Security Into Your DevOps Workflow
The need for speed, agility, and security is paramount in the rapidly evolving landscape of software development and IT operations. DevOps, focusing on collaboration and automation, has revolutionized the industry. However, in an era where digital threats are becoming increasingly…
Unleashing the Power of On-Premise MFA_ Elevate Active Directory Security
In today’s digital age, the backbone of any organization’s IT infrastructure is its Active Directory (AD). This centralized directory service manages authentication and authorization, making it critical for safeguarding sensitive data and maintaining system integrity. However, as the technological landscape…
Hardcoded Secret at the Heart of the Dell Compellent VMware Vulnerability
In August, Dell disclosed vulnerability CVE-2023-39250 where “A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.” This actively affects Dell Storage Integration Tools for VMware (DSITV) customers. Learn…
Decoding Business Source Licensing: A New Software Licensing Model
Business source licensing (BSL) has recently emerged as an alternative software licensing model that aims to blend the benefits of both open-source and proprietary licensing. For developers and IT professionals evaluating solutions, understanding what BSL is and its implications can…
Breach and Attack Simulation Technology (Short Version)
The ever-evolving cybersecurity landscape presents growing challenges in defending against sophisticated cyber threats. Managing security in today’s complex, hybrid/multi-cloud architecture compounds these challenges. This article explores the importance of demonstrating cybersecurity effectiveness and the role of Breach and Attack Simulation…
How To Validate Archives and Identify Invalid Documents in Java
In our contemporary cybersecurity landscape, sneaky custom content threats are beginning to penetrate our email security policies and firewalls/virus-scanning network proxies with greater consistency. Aptly disguised files can easily wind their way into our inboxes and our most sensitive file…
Deploy a Session Recording Solution Using Ansible and Audit Your Bastion Host
Learn how to record SSH sessions on a Red Hat Enterprise Linux VSI in a Private VPC network using in-built packages. The VPC private network is provisioned through Terraform and the RHEL packages are installed using Ansible automation. What Is…
UX Is Critical for Zero-Trust
Implementing a zero-trust framework is essential to any website’s security — everything must be verified and authenticated. It ensures data integrity and prioritizes safety for everyone involved, especially the users. The Relationship Between UX and Security Prioritizing security and nothing…